deploy: update catalyst images to cdda974

products/catalyst/chart/templates/api-deployment.yaml

@@ -160,7 +160,7 @@ spec:
           # values.yaml `images.catalystApi.tag` is also bumped (but
           # unused for catalyst-api; kept for SME services that DO read
           # from values).
-          image: "ghcr.io/openova-io/openova/catalyst-api:658ca7e"
+          image: "ghcr.io/openova-io/openova/catalyst-api:cdda974"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080
@@ -216,7 +216,7 @@ spec:
             # field so dashboards can correlate api-version <-> chart-
             # version on a single probe.
             - name: CATALYST_BUILD_SHA
-              value: "658ca7e"
+              value: "cdda974"
             - name: CATALYST_CHART_VERSION
               value: "1.4.95"
             - name: CORS_ORIGIN

products/catalyst/chart/templates/ui-deployment.yaml

@@ -24,7 +24,7 @@ spec:
           # Auto-bumped by .github/workflows/catalyst-build.yaml's deploy
           # step on every push to main, so Sovereigns AND contabo both
           # roll to the latest catalyst-ui SHA.
-          image: "ghcr.io/openova-io/openova/catalyst-ui:658ca7e"
+          image: "ghcr.io/openova-io/openova/catalyst-ui:cdda974"
           imagePullPolicy: IfNotPresent
           ports:
             - containerPort: 8080

products/catalyst/chart/values.yaml

@@ -230,9 +230,9 @@ images:
   organization: "openova-io/openova"
   # SHA tags — bump these via CI when building new images.
   catalystApi:
-    tag: "658ca7e"
+    tag: "cdda974"
   catalystUi:
-    tag: "658ca7e"
+    tag: "cdda974"
   marketplaceApi:
     tag: "3c2f7e4"
   console: